403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.23.09.txt
 ## swap threshold exceeded
## server overview
2025-11-22.23.09 load[0] mem[48/76] mysql[1/10] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1086         236         108        1040        1003
Swap:          1999        1618         381
 23:09:01 up 12:06,  0 users,  load average: 0.17, 0.94, 1.17
## system overview
top - 23:09:01 up 12:06,  0 users,  load average: 0.17, 0.94, 1.17
Tasks: 206 total,   7 running, 198 sleeping,   0 stopped,   1 zombie
%Cpu(s): 54.8 us, 45.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   208840 free,  1145228 used,  1066232 buff/cache
KiB Swap:  2047996 total,   390396 free,  1657600 used.   994136 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1916 mysql     20   0 1478016 295560   3224 S  31.2 12.2   9:36.15 /usr/sbin+
 12624 root      20   0  143844   7128   2528 R  12.5  0.3   0:00.02 /usr/loca+
  4964 nobody    20   0  277876  20540   4340 S   6.2  0.8   0:00.77 /usr/sbin+
 12630 cloudsms  20   0  404052  15612  10164 S   6.2  0.6   0:00.01 /opt/cpan+
 12631 pactpay   20   0  479860  16168  10572 R   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44508   3424   1576 S   0.0  0.1   0:59.63 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.31 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.77 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:41.97 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.75 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:06.60 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:20.01 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:01.05 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.08 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.59 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:02.17 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40240   7132   6828 S   0.0  0.3   0:26.14 /usr/lib/+
   384 root      20   0   45352    312    296 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    540    412 S   0.0  0.0   0:04.31 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    456    368 S   0.0  0.0   0:00.99 /usr/sbin+
   501 root      20   0   24704   1260    884 S   0.0  0.1   0:09.87 /usr/lib/+
   502 dbus      20   0   58720   1504    776 S   0.0  0.1   0:22.55 /usr/bin/+
   504 rpc       20   0   69256    184    124 S   0.0  0.0   0:00.04 /sbin/rpc+
   514 root      20   0  224148   5084   1164 S   0.0  0.2   0:00.47 queueproc+
   515 polkitd   20   0  610540    860    460 S   0.0  0.0   0:05.73 /usr/lib/+
   521 root      20   0  152780    220    176 S   0.0  0.0   0:00.03 /usr/sbin+
   523 root      20   0   52852    500    384 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0  994492   1444    752 S   0.0  0.1   0:30.98 /usr/sbin+
   544 root      20   0  195208     24     24 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     52     48 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     24      4 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124476    504    376 S   0.0  0.0   0:01.20 /usr/sbin+
   591 root      20   0  108296    136    132 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704    108    108 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   4072   1036 S   0.0  0.2   0:00.85 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.47 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     28     28 S   0.0  0.0   0:00.93 /usr/bin/+
   912 root      20   0 1277312   5996    140 S   0.0  0.2   0:24.71 /usr/bin/+
   913 systuser  20   0  111864     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   914 root      20   0  572372   1096    512 S   0.0  0.0   0:03.72 /usr/bin/+
   915 root      20   0   51508    592    428 S   0.0  0.0   0:00.65 /usr/sbin+
   916 telegraf  20   0 5654304  36464   5660 S   0.0  1.5   0:23.13 /usr/loca+
   917 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 systuser  20   0  114016  14512   2580 S   0.0  0.6   0:10.18 /usr/loca+
   926 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   927 root      20   0  111304    492    392 S   0.0  0.0   0:06.57 /usr/sbin+
   928 root      20   0 1276100   8520    104 S   0.0  0.4   0:25.57 /usr/bin/+
   930 root      20   0  445028   1408   1296 S   0.0  0.1   0:01.66 sw-engine+
   931 root      20   0  153404    392    308 S   0.0  0.0   0:00.95 pure-ftpd+
   932 systuser  20   0   10132     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   934 root      20   0  439788   1088    880 S   0.0  0.0   0:01.14 php-fpm: +
   938 root      20   0  388892    716    504 S   0.0  0.0   0:01.02 php-fpm: +
   939 root      20   0 1763124  76856    572 S   0.0  3.2   0:13.84 /usr/loca+
   940 root      20   0  331088   7832   6564 S   0.0  0.3   0:12.85 /usr/sbin+
   949 named     20   0 1055800  43312   2024 S   0.0  1.8   0:19.18 /usr/sbin+
   958 root      20   0  400740   3024    720 S   0.0  0.1   0:05.08 php-fpm: +
   962 root      20   0  261692   8704   1608 S   0.0  0.4   0:06.34 cpsrvd (S+
   969 cpanelc+  20   0   10564   3776   2372 R   0.0  0.2   0:34.62 /usr/loca+
   979 root      20   0  396248    572    396 S   0.0  0.0   0:01.07 php-fpm: +
   985 root      20   0  389508    728    516 S   0.0  0.0   0:01.12 php-fpm: +
  1083 dovenull  20   0   47116   3308   2372 S   0.0  0.1   0:01.38 dovecot/p+
  1084 dovenull  20   0   48236   3464   1636 S   0.0  0.1   0:00.45 dovecot/i+
  1085 dovecot   20   0   10320    292    172 S   0.0  0.0   0:00.32 dovecot/a+
  1086 root      20   0   10452    504    296 S   0.0  0.0   0:00.84 dovecot/l+
  1087 dovenull  20   0   47264   3480   2428 S   0.0  0.1   0:01.60 dovecot/p+
  1088 dovenull  20   0   48324   3772   1888 S   0.0  0.2   0:00.44 dovecot/i+
  1093 root      20   0   24528   2500    484 S   0.0  0.1   0:00.28 dovecot/c+
  1101 dovecot   20   0   13568    556    312 S   0.0  0.0   0:00.11 dovecot/s+
  1142 root      20   0  247932 115592   1124 S   0.0  4.8   0:07.99 /usr/loca+
  1161 dovecot   20   0   41320   1748   1096 S   0.0  0.1   0:02.13 dovecot/a+
  1175 systuser  20   0  157708   2924    872 S   0.0  0.1   0:00.19 SonarPush+
  1177 wp-tool+  20   0  387528   5056   1788 S   0.0  0.2   0:00.39 /usr/bin/+
  1178 wp-tool+  20   0  412368  28704   1968 S   0.0  1.2   0:13.72 /usr/bin/+
  1260 root      20   0  183900   6696   3460 S   0.0  0.3   0:04.64 cpdavd - +
  1263 root      20   0  167452   1404    804 S   0.0  0.1   0:00.62 dnsadmin +
  1264 root      20   0  209648  11800   2000 S   0.0  0.5   0:05.20 tailwatchd
  1800 root      20   0  299272    764    388 S   0.0  0.0   0:01.14 php-fpm: +
  1834 root      38  18  130416   1456    772 S   0.0  0.1   0:00.12 cpanellog+
  2048 root      20   0  267052   9076    748 S   0.0  0.4   0:03.01 /usr/sbin+
  2050 root      20   0   12828    440    320 S   0.0  0.0   0:04.50 /usr/loca+
  2051 root      20   0   12732    380    304 S   0.0  0.0   0:03.98 /usr/loca+
  2052 root      20   0   12856    440    308 S   0.0  0.0   0:04.20 /usr/loca+
  2059 root      20   0   53340    180    180 S   0.0  0.0   0:00.05 /usr/loca+
  2138 root      20   0  187004  16208   1228 S   0.0  0.7   0:44.44 lfd - sle+
  3800 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  3966 nobody    20   0  277908  20700   4420 S   0.0  0.9   0:00.78 /usr/sbin+
  3979 nobody    20   0  277580  20212   4164 S   0.0  0.8   0:00.91 /usr/sbin+
  4072 nobody    20   0  277616  20636   4516 S   0.0  0.9   0:00.76 /usr/sbin+
  4949 nobody    20   0  277928  20908   4408 S   0.0  0.9   0:00.81 /usr/sbin+
  5204 nobody    20   0  277584  20276   4260 S   0.0  0.8   0:00.68 /usr/sbin+
  5205 nobody    20   0  277876  20568   4324 S   0.0  0.8   0:00.61 /usr/sbin+
  5390 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
  5633 root      20   0  271996 133892   1732 S   0.0  5.5   0:05.20 spamd chi+
  5634 root      20   0  247932 114840    452 S   0.0  4.7   0:00.02 spamd chi+
  5789 nobody    20   0  277584  20432   4284 S   0.0  0.8   0:00.68 /usr/sbin+
  6043 nobody    20   0  277536  20376   4312 S   0.0  0.8   0:00.57 /usr/sbin+
  6423 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6775 nobody    20   0  277908  20988   4588 S   0.0  0.9   0:00.72 /usr/sbin+
  6818 nobody    20   0  277904  20852   4468 S   0.0  0.9   0:00.60 /usr/sbin+
  8015 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9377 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9890 nobody    20   0  277912  20524   4344 S   0.0  0.8   0:00.36 /usr/sbin+
 10321 mailnull  20   0   91212   5868   2584 S   0.0  0.2   0:00.00 /usr/sbin+
 11495 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 11550 nobody    20   0  277584  19796   3832 S   0.0  0.8   0:00.16 /usr/sbin+
 11778 nobody    20   0  277908  19892   3796 S   0.0  0.8   0:00.09 /usr/sbin+
 12033 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12127 nobody    20   0  277520  19580   3708 S   0.0  0.8   0:00.09 /usr/sbin+
 12283 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 12340 nigeria   20   0  400460   5496   2384 S   0.0  0.2   0:00.01 php-fpm: +
 12476 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
 12522 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 12523 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 12526 root      20   0  111304   4444   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 12527 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 12554 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 12562 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 12563 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12564 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12565 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12566 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 12567 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12568 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12569 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12570 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12571 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12572 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 12573 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12574 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12575 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 12576 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12577 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 12578 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 12579 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 12601 root      20   0  160244   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 12602 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 12603 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 12605 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12606 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 12607 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 12608 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 12609 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12611 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 12612 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 12613 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12614 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 12615 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 12616 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 12617 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 12619 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 12622 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 12625 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 12626 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 12627 saboakin  20   0  404052  15608  10156 S   0.0  0.6   0:00.00 /opt/cpan+
 12628 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 12629 robocal+  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 12632 cloudsms  20   0       0      0      0 R   0.0  0.0   0:00.00 [jailshel+
 12633 nigeria   20   0  404052  15876  10124 R   0.0  0.7   0:00.00 /opt/cpan+
 47566 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.76 [kworker]
 55218 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 81963 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 90332 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 93714 nobody    20   0  277908  21280   4756 S   0.0  0.9   0:02.36 /usr/sbin+
 96399 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
102387 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    11:02   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    11:02   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    11:02   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    11:02   0:41  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    11:02   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    11:02   0:06  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    11:02   0:20  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   11:02   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   11:02   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    11:02   0:01  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   11:02   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   11:02   0:02  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    11:02   0:02  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   11:02   0:02  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ext4-rsv-conver]
root      55218  0.0  0.0      0     0 ?        S    21:44   0:00  \_ [kworker/1:3]
root      81963  0.0  0.0      0     0 ?        D    22:22   0:00  \_ [kworker/1:1]
root      90332  0.0  0.0      0     0 ?        D    22:34   0:00  \_ [kworker/u200:2]
root      96399  0.0  0.0      0     0 ?        S    22:43   0:00  \_ [kworker/0:3]
root     102387  0.0  0.0      0     0 ?        S    22:52   0:00  \_ [kworker/0:0]
root       3800  0.0  0.0      0     0 ?        S    22:57   0:00  \_ [kworker/1:2]
root       5390  0.0  0.0      0     0 ?        S    22:59   0:00  \_ [kworker/0:4]
root       6423  0.0  0.0      0     0 ?        S    23:00   0:00  \_ [kworker/u200:1]
root       8015  0.0  0.0      0     0 ?        S    23:02   0:00  \_ [kworker/1:0]
root       9377  0.0  0.0      0     0 ?        S    23:04   0:00  \_ [kworker/1:4]
root      11495  0.0  0.0      0     0 ?        S    23:07   0:00  \_ [kworker/0:1]
root      12033  0.0  0.0      0     0 ?        S    23:08   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44508  3424 ?        Ss   11:02   0:59 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.2  40240  7132 ?        Ss   11:02   0:26 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   312 ?        Ss   11:02   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   540 ?        S<sl 11:02   0:04 /sbin/auditd
root        499  0.0  0.0  21540   456 ?        Ss   11:02   0:00 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1260 ?        Ss   11:02   0:09 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58720  1504 ?        Rs   11:02   0:22 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256   184 ?        Ss   11:02   0:00 /sbin/rpcbind -w
root        514  0.0  0.2 224148  5084 ?        Ss   11:02   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.0 610540   860 ?        Ssl  11:02   0:05 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780   220 ?        Ss   11:02   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   500 ?        Ss   11:02   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 994492  1444 ?        Ssl  11:02   0:30 /usr/sbin/nscd
root        544  0.0  0.0 195208    24 ?        Ssl  11:02   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    52 ?        Ss   11:02   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    24 ?        Ss   11:02   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124476   504 ?        Ss   11:02   0:01 /usr/sbin/crond -n
root      12562  0.0  0.0 183044  2140 ?        S    23:09   0:00  \_ /usr/sbin/CROND -n
root      12577  0.0  0.0 113284  1212 ?        Ss   23:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      12578  0.0  0.0 108052   356 ?        S    23:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      12579  0.0  0.0 113288  1516 ?        S    23:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      12639  0.0  0.0 153840  2092 ?        R    23:09   0:00  |               \_ ps auxf
root      12563  0.0  0.0 183044  2144 ?        S    23:09   0:00  \_ /usr/sbin/CROND -n
root      12613  0.0  0.0  20164   808 ?        Ss   23:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      12564  0.0  0.0 183044  2144 ?        S    23:09   0:00  \_ /usr/sbin/CROND -n
root      12614  0.0  0.0  20164   804 ?        Ss   23:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      12566  0.0  0.0 183044  2136 ?        S    23:09   0:00  \_ /usr/sbin/CROND -n
root      12603  0.0  0.0  20164   968 ?        Ss   23:09   0:00  |   \_ jailshell (cloudsms) [12619] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  12619  0.0  0.0  20164   264 ?        S    23:09   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  12625  0.0  0.0 113284  1212 ?        S    23:09   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  12630  0.0  0.6 404052 15612 ?        S    23:09   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      12567  0.0  0.0 183044  2144 ?        S    23:09   0:00  \_ /usr/sbin/CROND -n
root      12609  0.0  0.0  20164   808 ?        Ss   23:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      12568  0.0  0.0 183044  2144 ?        S    23:09   0:00  \_ /usr/sbin/CROND -n
root      12611  0.0  0.0  20164   804 ?        Ss   23:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      12569  0.0  0.0 183044  2144 ?        S    23:09   0:00  \_ /usr/sbin/CROND -n
root      12606  0.0  0.0  20164   804 ?        Ss   23:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      12570  0.0  0.0 183044  2144 ?        S    23:09   0:00  \_ /usr/sbin/CROND -n
root      12617  0.0  0.0  20164   804 ?        Ss   23:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      12571  0.0  0.0 183044  2144 ?        S    23:09   0:00  \_ /usr/sbin/CROND -n
root      12605  0.0  0.0  20164   808 ?        Ss   23:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      12572  0.0  0.0 183044  2140 ?        S    23:09   0:00  \_ /usr/sbin/CROND -n
root      12615  0.0  0.0 113284  1212 ?        Ss   23:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      12624  0.0  0.3 145048  8176 ?        R    23:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      12573  0.0  0.0 183044  2144 ?        S    23:09   0:00  \_ /usr/sbin/CROND -n
root      12608  0.0  0.0  20164   968 ?        Ss   23:09   0:00  |   \_ jailshell (pactpay) [12626] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   12626  0.0  0.0  20164   264 ?        S    23:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   12631  0.0  0.6 479860 16168 ?        Sl   23:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      12574  0.0  0.0 183044  2144 ?        S    23:09   0:00  \_ /usr/sbin/CROND -n
root      12616  0.0  0.0  20164   964 ?        Ss   23:09   0:00  |   \_ jailshell (robocallscloudsm) [12629]  /home/robocallscloudsm/public_html && /usr/local/bin/php artisan schedule:run >> /dev/null 2>&1
robocal+  12629  0.0  0.0      0     0 ?        D    23:09   0:00  |       \_ [jailshell]
root      12575  0.0  0.0 183044  2140 ?        S    23:09   0:00  \_ /usr/sbin/CROND -n
root      12607  0.0  0.0  20164   968 ?        Ss   23:09   0:00  |   \_ jailshell (nigeria) [12628] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   12628  0.0  0.0  20164   264 ?        S    23:09   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   12633  0.0  0.6 404052 16140 ?        S    23:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      12576  0.0  0.0 183044  2144 ?        S    23:09   0:00  \_ /usr/sbin/CROND -n
root      12602  0.0  0.0  20164   964 ?        Ss   23:09   0:00      \_ jailshell (saboakin) [12622] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  12622  0.0  0.0  20164   260 ?        S    23:09   0:00          \_ jailshell (saboakin) [init] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  12627  0.0  0.6 404052 15608 ?        S    23:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/saboakin/public_html/massmailer/cron.php
root        591  0.0  0.0 108296   136 tty1     Ss+  11:02   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704   108 ttyS0    Ss+  11:02   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  4072 ?        Ss   11:02   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  10321  0.0  0.2  91212  5868 ?        S    23:05   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    28 ?        Ssl  11:02   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.2 1277312 5996 ?        Ssl  11:02   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    80 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372  1096 ?        Ssl  11:02   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   592 ?        Ss   11:02   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.1  47116  3308 ?        S    11:03   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  48236  3464 ?        S    11:03   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   292 ?        S    11:03   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   504 ?        S    11:03   0:00  \_ dovecot/log
dovenull   1087  0.0  0.1  47264  3480 ?        S    11:03   0:01  \_ dovecot/pop3-login
dovenull   1088  0.0  0.1  48324  3772 ?        S    11:03   0:00  \_ dovecot/imap-login
root       1093  0.0  0.1  24528  2500 ?        S    11:03   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   556 ?        S    11:03   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1748 ?        S    11:03   0:02  \_ dovecot/auth
root      12283  0.0  0.1  41052  2728 ?        S    23:08   0:00  \_ dovecot/auth -w
telegraf    916  0.0  1.5 5654304 36464 ?       SLsl 11:02   0:23 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756    56 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.5 114016 14512 ?        Ssl  11:02   0:10 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    72 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   492 ?        Ss   11:02   0:06 /usr/sbin/sshd -D
root      12522  0.0  0.1 111304  4272 ?        Ss   23:08   0:00  \_ sshd: [accepted]
sshd      12523  0.0  0.1 115644  2628 ?        S    23:08   0:00  |   \_ sshd: [net]
root      12526  0.0  0.1 111304  4444 ?        Ss   23:08   0:00  \_ sshd: [accepted]
sshd      12527  0.0  0.1 115644  2628 ?        S    23:08   0:00      \_ sshd: [net]
root        928  0.0  0.3 1276100 8520 ?        Ssl  11:02   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028  1408 ?        Ss   11:02   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  12476  0.0  0.0 445028   324 ?        S    23:08   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   392 ?        Ss   11:02   0:00 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132    40 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.0 439788  1088 ?        Ss   11:02   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   716 ?        Ss   11:02   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        939  0.0  3.1 1763124 76856 ?       Ssl  11:02   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.3 331088  7832 ?        Ssl  11:02   0:12 /usr/sbin/rsyslogd -n
named       949  0.0  1.7 1055800 43312 ?       Ssl  11:02   0:19 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  3024 ?        Ss   11:03   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   12340  0.0  0.2 400460  5496 ?        S    23:08   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.3 261692  8704 ?        Ss   11:03   0:06 cpsrvd (SSL) - waiting for connections                   
root      12554  0.0  0.0      0     0 ?        Z    23:08   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10564  3776 ?        Ss   11:03   0:34 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   572 ?        Ss   11:03   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   728 ?        Ss   11:03   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  4.7 247932 115592 ?       Ss   11:03   0:07 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5633  0.0  5.5 271996 133892 ?       S    11:06   0:05  \_ spamd child
root       5634  0.0  4.7 247932 114840 ?       S    11:06   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  2924 ?        S    11:03   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.2 387528  5056 ?        Ss   11:03   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  1.1 412368 28704 ?        Ss   11:03   0:13 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  0.2 183900  6696 ?        Ss   11:03   0:04 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1263  0.0  0.0 167452  1404 ?        Ss   11:03   0:00 dnsadmin - dormant mode
root       1264  0.0  0.4 209648 11800 ?        Ss   11:03   0:05 tailwatchd
root       1800  0.0  0.0 299272   764 ?        Ss   11:03   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1456 ?        SN   11:03   0:00 cpanellogd - sleeping for logs
mysql      1916  1.3 12.2 1478016 295560 ?      Sl   11:03   9:36 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  9076 ?        Ss   11:03   0:03 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12828   440 ?        S    11:03   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   380 ?        S    11:03   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12856   440 ?        S    11:03   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340   180 ?        S    11:03   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    93714  0.1  0.8 277908 21280 ?        S    22:39   0:02  \_ /usr/sbin/httpd -k start
nobody     3966  0.1  0.8 277908 20700 ?        S    22:57   0:00  \_ /usr/sbin/httpd -k start
nobody     3979  0.1  0.8 277580 20212 ?        S    22:57   0:00  \_ /usr/sbin/httpd -k start
nobody     4072  0.1  0.8 277616 20636 ?        S    22:57   0:00  \_ /usr/sbin/httpd -k start
nobody     4949  0.1  0.8 277928 20908 ?        S    22:58   0:00  \_ /usr/sbin/httpd -k start
nobody     4964  0.1  0.8 277876 20540 ?        S    22:58   0:00  \_ /usr/sbin/httpd -k start
nobody     5204  0.1  0.8 277584 20276 ?        S    22:58   0:00  \_ /usr/sbin/httpd -k start
nobody     5205  0.1  0.8 277876 20568 ?        S    22:58   0:00  \_ /usr/sbin/httpd -k start
nobody     5789  0.1  0.8 277584 20432 ?        S    22:59   0:00  \_ /usr/sbin/httpd -k start
nobody     6043  0.1  0.8 277536 20376 ?        S    22:59   0:00  \_ /usr/sbin/httpd -k start
nobody     6775  0.1  0.8 277908 20988 ?        S    23:00   0:00  \_ /usr/sbin/httpd -k start
nobody     6818  0.1  0.8 277904 20852 ?        S    23:00   0:00  \_ /usr/sbin/httpd -k start
nobody     9890  0.1  0.8 277912 20524 ?        S    23:04   0:00  \_ /usr/sbin/httpd -k start
nobody    11550  0.1  0.8 277584 19796 ?        S    23:07   0:00  \_ /usr/sbin/httpd -k start
nobody    11778  0.1  0.8 277908 19892 ?        S    23:07   0:00  \_ /usr/sbin/httpd -k start
nobody    12127  0.1  0.8 277520 19580 ?        S    23:08   0:00  \_ /usr/sbin/httpd -k start
root       2138  0.1  0.6 187004 16208 ?        Ss   11:03   0:44 lfd - sleeping
oysipao+  47566  0.0  0.0   3148   416 ?        Ss   12:00   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152   424 ?        S    12:00   0:00  \_ [kworker]
## mysql stats
Uptime: 43555  Threads: 7  Questions: 3544564  Slow queries: 0  Opens: 8989  Flush tables: 1  Open tables: 2000  Queries per second avg: 81.381
*************************** 1. row ***************************
     Id: 55607
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 55610
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 55612
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.150.65 TIME_WAIT
      1 137.135.190.254 TIME_WAIT
      1 15.235.98.116 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 192.178.4.103 TIME_WAIT
      1 192.178.4.104 TIME_WAIT
      1 ::1 TIME_WAIT
      1 212.56.36.122 TIME_WAIT
      1 5.255.231.100 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 223.109.252.142 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 23:09:01 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 12 hours 5 minutes 50 seconds
   Server load: 0.17 0.94 1.17
   Total accesses: 200019 - Total Traffic: 4.8 GB - Total Duration: 106628757
   CPU Usage: u8.34 s5.62 cu2483.98 cs1946.99 - 10.2% CPU load
   4.59 requests/sec - 114.8 kB/second - 25.0 kB/request - 533.093 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

_.K_KKKK..K..W..K......W.........K._..._..............K....W....
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req    Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-0  9890  0/63/10513  _ 1.58 0    0     5388792 0.0   1.66  257.03 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   1-0  -     0/0/10311   . 0.00 50   0     5346622 0.0   0.00  252.09 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-0  11550 5/28/10145  K 0.72 2    273   5552809 158.7 1.15  244.17 192.178.4.100  http/1.1 team.cloudware.ng:443      GET /?l=379081251 HTTP/1.1
   3-0  11778 0/19/10101  _ 0.27 1    3     5237044 0.0   0.35  254.18 34.204.150.196 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/blog/blog/images/2019electi
   4-0  93714 3/420/10009 K 9.87 3    360   5275490 99.2  11.19 253.22 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /?l=551935539 HTTP/1.1
   5-0  5789  1/120/10170 K 2.79 3    343   5239813 35.2  3.96  274.11 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /?l=1725826390 HTTP/1.1
   6-0  4949  2/148/9792  K 3.53 1    345   4881098 63.3  4.84  246.08 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /?l=4249434079 HTTP/1.1
   7-0  12127 6/16/9814   K 0.37 0    354   5036112 188.2 0.43  239.02 192.178.4.105  http/1.1 team.cloudware.ng:443      GET /?l=132872546 HTTP/1.1
   8-0  -     0/0/9557    . 0.00 468  0     4747888 0.0   0.00  231.43 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-0  -     0/0/8690    . 0.00 505  0     4467138 0.0   0.00  218.53 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 4964  2/189/8900  K 3.07 0    279   4504163 65.9  3.35  211.75 192.178.4.102  http/1.1 team.cloudware.ng:443      GET /?l=2946456746 HTTP/1.1
   11-0 -     0/0/8903    . 0.00 486  0     4496200 0.0   0.00  217.39 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-0 -     0/0/8954    . 0.00 472  0     4626538 0.0   0.00  226.78 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 3966  0/152/7958  W 3.68 0    0     4132091 0.0   3.67  194.10 68.221.75.24   http/1.1 oysipa.oyostate.gov.ng:443 GET /download_documents/BENEFICIARIES-ON-STATE-INVESTMENT-INCEN
   14-0 -     0/0/7281    . 0.00 493  0     3763736 0.0   0.00  178.89 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 -     0/0/5830    . 0.00 489  0     2922583 0.0   0.00  154.13 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 3979  5/159/6546  K 3.84 3    359   3338339 157.3 4.31  154.57 192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=3909662528 HTTP/1.1
   17-0 -     0/0/6287    . 0.00 480  0     3222559 0.0   0.00  156.68 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/5259    . 0.00 481  0     2782111 0.0   0.00  127.33 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/5811    . 0.00 503  0     2820563 0.0   0.00  134.39 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/4387    . 0.00 470  0     2355188 0.0   0.00  104.64 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/3356    . 0.00 484  0     1988337 0.0   0.00  82.16  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/2494    . 0.00 144  0     1467319 0.0   0.00  69.66  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 6043  0/103/2081  W 2.54 0    0     1059525 0.0   2.53  40.97  ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   24-0 -     0/0/1227    . 0.00 492  0     729351  0.0   0.00  28.40  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/2072    . 0.00 498  0     892109  0.0   0.00  46.07  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/1319    . 0.00 463  0     867971  0.0   0.00  30.80  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/1034    . 0.00 487  0     714262  0.0   0.00  30.80  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/1391    . 0.00 477  0     707467  0.0   0.00  30.77  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/1114    . 0.00 465  0     729421  0.0   0.00  23.71  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/1286    . 0.00 497  0     794355  0.0   0.00  30.29  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/526     . 0.00 509  0     402031  0.0   0.00  9.54   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/518     . 0.00 495  0     501315  0.0   0.00  10.45  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 5204  2/127/186   K 2.76 3    344   224919  65.0  3.21  3.49   192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=205620835 HTTP/1.1
   34-0 -     0/0/585     . 0.00 494  0     401414  0.0   0.00  8.75   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 5205  0/116/611   _ 2.67 1    1     490091  0.0   2.84  13.75  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   36-0 -     0/0/74      . 0.00 466  0     128926  0.0   0.00  0.43   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/181     . 0.00 462  0     172759  0.0   0.00  4.15   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/655     . 0.00 490  0     329138  0.0   0.00  12.59  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 4072  0/156/441   _ 3.13 1    347   439494  0.0   3.99  10.07  192.178.4.103  http/1.1 team.cloudware.ng:443      GET /?l=110315633 HTTP/1.1
   40-0 -     0/0/224     . 0.00 450  0     279837  0.0   0.00  4.33   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/409     . 0.00 485  0     303799  0.0   0.00  9.44   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/118     . 0.00 335  0     273924  0.0   0.00  1.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/73      . 0.00 488  0     237945  0.0   0.00  0.86   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/289     . 0.00 479  0     301814  0.0   0.00  6.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/180     . 0.00 482  0     137352  0.0   0.00  1.38   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/60      . 0.00 478  0     180509  0.0   0.00  0.80   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/67      . 0.00 500  0     226531  0.0   0.00  1.33   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/203     . 0.00 491  0     142085  0.0   0.00  4.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/284     . 0.00 143  0     181603  0.0   0.00  4.73   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/82      . 0.00 504  0     44788   0.0   0.00  1.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/8       . 0.00 464  0     43835   0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/9       . 0.00 473  0     45747   0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/29      . 0.00 471  0     44492   0.0   0.00  0.32   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 6775  1/129/130   K 3.24 1    359   118974  34.2  3.74  3.74   192.178.4.103  http/1.1 team.cloudware.ng:443      GET /?l=1024498767 HTTP/1.1
   55-0 -     0/0/4       . 0.00 508  0     23627   0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/9       . 0.00 467  0     47344   0.0   0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/7       . 0.00 469  0     44159   0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/43      . 0.00 510  11655 23366   0.0   0.00  0.07   45.94.58.4     http/1.1 cloudware.ng:80            GET /requirements.txt HTTP/1.1
   59-0 6818  3/109/113   W 2.81 0    0     100459  94.7  2.72  2.82   192.178.4.96   http/1.1 team.cloudware.ng:443      GET /?l=313733462 HTTP/1.1
   60-0 -     0/0/132     . 0.00 501  0     76946   0.0   0.00  2.87   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/6       . 0.00 499  0     3701    0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/204     . 0.00 58   0     97395   0.0   0.00  2.67   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/66      . 0.00 483  0     27806   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/11      . 0.00 476  0     25454   0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/9       . 0.00 496  0     28822   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/27      . 0.00 2022 0     28      0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/42      . 0.00 2027 0     46      0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/3       . 0.00 2065 0     1240    0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/2       . 0.00 2064 0     703     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/5       . 0.00 2057 0     1790    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/47      . 0.00 2005 0     737     0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/1       . 0.00 2076 0     0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/458     . 0.00 612  0     263682  0.0   0.00  8.36   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/9       . 0.00 2053 0     4803    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/1       . 0.00 2075 0     0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/23      . 0.00 2017 0     2942    0.0   0.00  0.21   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/200     . 0.00 1374 0     87870   0.0   0.00  4.44   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/63      . 0.00 1877 0     25484   0.0   0.00  1.24   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 907
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...38)
   index usage: 16%, cache usage: 21%
   total entries stored since starting: 144569
   total entries replaced since starting: 0
   total entries expired since starting: 143611
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 356 miss
   total removes since starting: 51 hit, 189 miss
Youez - 2016 - github.com/yon3zu
LinuXploit